Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: tVuVLdw+8KTaF9xmMpoAh7Yr4c64Jq9UJFy2prh2bd8=
Subject key identifier: 24:65:2E:7E:1C:9E:EA:24:C4:6E:60:3E:29:D1:80:8F:0D:4E:07:23
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0199391550DDE1A6B90F69F6A85BC66E7F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 0628
Signing time: Thu 11 Sep 2025 14:02:02 +0000
Manifest this update: Thu 11 Sep 2025 14:02:02 +0000
Manifest next update: Fri 12 Sep 2025 14:02:02 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: s6T2jXdZXl7cHxzIC4xIiYIyvc8/47lfECckUElg3I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:50:dd:e1:a6:b9:0f:69:f6:a8:5b:c6:6e:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Sep 11 14:02:02 2025 GMT
Not After : Sep 12 14:02:02 2025 GMT
Subject: CN=24652e7e1c9eea24c46e603e29d1808f0d4e0723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:4d:5b:95:47:63:e1:60:8d:30:4d:2c:29:
f5:a2:f7:36:f6:b4:eb:a6:bf:e2:dc:df:98:e3:4b:
01:37:32:40:64:72:60:f7:16:cc:ef:1f:3f:b1:9c:
38:db:8d:b5:13:3e:a8:25:42:27:73:79:29:80:1a:
6c:b4:4a:fd:e7:0a:22:31:39:6e:58:59:b4:80:48:
14:b5:cc:c0:43:b9:46:d4:80:01:1b:dc:7e:c1:56:
92:59:6f:4b:d8:88:6f:f1:49:08:53:09:6e:11:a1:
c7:11:b7:77:0d:d6:4a:cd:e1:3d:0d:07:fd:22:08:
e1:3a:f9:a7:d0:9c:71:a8:38:c8:48:e8:7d:31:e2:
9a:d5:42:1f:f9:99:e9:eb:05:ba:b4:76:be:52:38:
32:be:ed:2c:17:69:3d:be:e8:99:72:a0:c9:ca:6b:
6e:e5:71:5c:70:8c:07:52:47:7f:68:4f:fb:5b:cd:
d3:f8:15:ac:f3:25:92:a3:36:ed:14:ad:f0:7f:11:
47:e4:4c:61:62:a4:73:73:74:10:ac:1c:bb:fd:b0:
ad:e9:94:84:ae:16:00:8c:f2:92:6b:2e:69:08:dc:
7c:a7:cd:2a:5f:32:15:46:8f:67:12:b1:bc:e2:45:
f1:4e:0c:62:9f:37:3d:81:56:b7:20:6d:99:84:28:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:2E:7E:1C:9E:EA:24:C4:6E:60:3E:29:D1:80:8F:0D:4E:07:23
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:74:50:e5:6a:ef:12:9a:3a:44:ef:05:d6:0b:72:85:9b:e9:
d2:e0:68:7d:62:b1:22:7a:a9:5a:96:3b:75:12:ec:84:20:6b:
47:83:5c:ea:ff:5d:f1:61:3c:fa:12:c7:f2:8e:7c:73:d8:d4:
3a:a9:63:c9:b6:cf:30:cb:70:8a:09:9b:4b:f4:48:b6:d1:7f:
d6:25:e1:1e:a4:91:98:a5:f1:ba:cd:bd:e5:70:9e:9f:e6:f1:
ea:e7:70:0c:d6:45:f8:0f:d7:ba:d6:25:1b:e9:d9:56:66:a3:
90:5e:a7:d7:b0:ea:4f:8b:79:0c:6c:fe:41:97:a9:60:fc:db:
84:a9:c3:54:e5:4e:b6:dc:21:1d:f5:9b:3c:9f:b1:a3:9a:07:
0e:41:8f:97:d6:0e:37:e3:cc:66:38:58:7f:ea:d1:51:ae:1a:
fa:cb:f9:11:2d:1a:72:64:1d:53:56:01:0e:16:7f:cc:f8:38:
81:9f:72:68:58:2b:fb:7e:21:3e:ce:2e:d4:56:f7:a9:c9:de:
4b:36:a2:c7:b4:1e:ef:5d:4c:ef:99:7a:ad:fc:b5:70:be:9e:
bd:4b:a9:45:28:a1:a1:d3:25:f3:f7:46:e9:a2:2d:0d:5f:fb:
34:95:8a:d3:19:87:6e:9a:30:73:15:82:f3:15:53:65:7c:47:
3e:e5:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:27:05 2025 by rpki-client